Improve CI

.config/nextest.toml

@@ -19,7 +19,7 @@ serial-integration = { max-threads = 1 }
 # * retries = 3
 # * retries = { backoff = "fixed", count = 2, delay = "1s" }
 # * retries = { backoff = "exponential", count = 10, delay = "1s", jitter = true, max-delay = "10s" }
-retries = 2
+retries = 0
 
 # The number of threads to run tests with. Supported values are either an integer or
 # the string "num-cpus". Can be overridden through the `--test-threads` option.
@@ -111,8 +111,10 @@ store-success-output = false
 store-failure-output = true
 
 [[profile.default.overrides]]
-filter = 'binary(=hyper)'
-retries = { backoff = "fixed", count = 6, delay = "1s" }
+# `hyper` test targeting external Google's service, it would sometomes failed because of rate limit
+# `is_probably_prime` test heavily use rdrand, sometimes the VM where test is running has shortage on it
+filter = 'binary(=hyper) or test(=is_probably_prime)'
+retries = { backoff = "exponential", count = 4, delay = "1s", jitter = true, max-delay = "10s" }
 test-group = 'serial-integration'
 
 [[profile.default.overrides]]

.github/workflows/publish-crates.yml

@@ -4,7 +4,11 @@ on:
   release:
     types: [created]
   workflow_dispatch:
-
+    inputs:
+      crate_name:
+        description: 'Name of crate to be published'
+        required: true
+        type: string
 permissions:
   contents: read
 
@@ -13,24 +17,40 @@ jobs:
     environment: "publish to crates.io"
     runs-on: ubuntu-latest
     steps:
-      - name: Install dependencies
+      - name: Checkout repository
+        uses: actions/checkout@v3
+      - name: Install Rust toolchain
+        uses: actions-rs/toolchain@v1
+        with:
+            toolchain: stable
+            override: true
+            profile: minimal
+      - name: Install build dependencies
         run: |
           wget -O - https://apt.llvm.org/llvm-snapshot.gpg.key | sudo apt-key add -
           echo "deb http://apt.llvm.org/focal/ llvm-toolchain-focal-11 main" | sudo tee -a /etc/apt/sources.list
           sudo apt-get update
           sudo apt-get install -y clang-11 cmake
-      - name: Symlink libclang.so
-        run: sudo ln -s /lib/x86_64-linux-gnu/libclang-11.so.1 /lib/x86_64-linux-gnu/libclang.so
-      - uses: actions/checkout@v2
-      - uses: actions-rs/toolchain@v1
-        with:
-            toolchain: stable
-            override: true
-      - run: |
-          export crate_name=$(python3 -c "print('$GITHUB_REF'.split('/')[2].rsplit('_v', 1)[0])")
-          echo "Publishing crate: $crate_name"
-          cargo publish --locked --token ${CARGO_REGISTRY_TOKEN} --package "$crate_name"
+          if [ -f mbedtls-sys/vendor/scripts/basic.requirements.txt ]; then
+            sudo apt-get install -y python3-pip
+            python3 -m pip install -r mbedtls-sys/vendor/scripts/basic.requirements.txt
+          fi
+      - name: Get name of crate to be published
+        run: |
+          if [[ -z "${{ inputs.crate_name }}" ]]; then
+            # Extract the crate name from the GITHUB_REF environment variable
+            # GITHUB_REF contains the GitHub reference (e.g., refs/tags/mbedtls-sys-auto_v3.5.0) associated with the event
+            export CRATE_NAME=$(python3 -c "print('$GITHUB_REF'.split('/')[2].rsplit('_v', 1)[0])")
+          else
+            export CRATE_NAME="${{ inputs.crate_name }}"
+          fi
+          echo "CRATE_NAME=$CRATE_NAME" >> $GITHUB_ENV
+      - name: Publish crate to crates.io
+        run: |
+          echo "Publishing crate: $CRATE_NAME"
+          cargo publish --locked --token ${CARGO_REGISTRY_TOKEN} --package "$CRATE_NAME"
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
           RUSTFLAGS: "-A ambiguous_glob_reexports"
           RUST_BACKTRACE: "1"
+          PYTHONDONTWRITEBYTECODE: "1"

.github/workflows/test.yml

@@ -3,7 +3,6 @@ name: Test
 on:
   push:
     branches:
-      - master
       - 'v0.*'
       - staging
       - trying
@@ -16,6 +15,8 @@ on:
 env:
   RUST_BACKTRACE: 1
   CARGO_TERM_COLOR: always
+  CARGO_INCREMENTAL: 0
+  CARGO_NET_RETRY: 10
 
 jobs:
   build:
@@ -51,6 +52,11 @@ jobs:
         target: ${{ matrix.target }}
         override: true
 
+    - name: Cache Dependencies
+      uses: Swatinem/rust-cache@988c164c3d0e93c4dbab36aaf5bbeb77425b2894
+      with:
+        key: ${{ matrix.rust }}
+
     - name: Run tests
       run: |
         ./ct.sh